Handle multiple CRAN repos better

[gaborcsardi]

E.g. RSPM + CRAN. This is a combinatorial explosion in the solver, so we need to remove alternatives first, by merging the download URLs of the repos into a single candidate.